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Abstract 

Let Q(a) and Q(/3) be algebraic number fields. We describe a new 
method to find (if they exist) all isomorphisms, Q(/5) — > Q(a). The 
algorithm is particularly efficient if the number of isomorphisms is one. 



1 Introduction 

Let Q(a) and Q(/3) be two number fields, given by the minimal polynomials 

f( x ) = Y17=ofi xt an d 9{ x ) = ^27=0 9i xt °^ a anc ^ P respectively. In this 
paper we give an algorithm to compute the isomorphisms Q(/3) — > Q(a). 
Suppose there is an isomorphism then we have the following diagram of 
field extensions: 



9(x) 



a) 

m 



To represent such an isomorphism we need to give the image of j3 in 
Q(a), in other words, we need to give a root of g{x) in Q(a). 

We now describe two common methods of computing isomorphisms of 
number fields. 



Method I. Field Isomorphism Using Polynomial Factorization [11, Algorithm 4.5.6] 

• Find all roots of g in Q(a). Each corresponds to an isomorphism 
Q(/S) — > Q(a). The roots can be found by factoring g over Q(a). 

(a) If done with Trager's method, one ends up factoring a poly- 
nomial in Q[x] of degree n 2 . 
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(b) An alternative is Belabas' algorithm for factoring in Q(a). 



Method II. Field Isomorphism Using Linear Algebra [11, Algorithm 4.5.1/4.5.5] 



(a) Let cti, . . . , ad be the roots of / in Q p (choose p with d > 0). 

(b) Let Pi, ... , (3d be the roots of g in Q p . 

(c) If P i->- is an isomorphism, then h(a±) = Pi for some i G 



(d) Run a loop z = l,...,d and for each i, use LLL[9] techniques 
to check if there exists a polynomial h(x) G Q[x]<„ for which 



Method I is often fast, but one can give examples where it becomes 
slow, e.g. for so-called Swinnerton-Dyer polynomials, the degree n 2 factoring 
leads to a lattice reduction in [VH 2002] of dimension approximately n 2 /2. 
Method 1(b) can be faster, but one can still produce examples where it 
becomes slow, e.g. [7]. For such examples method II is faster because the 
lattice reduction there has dimension approximately n. 

Our algorithm is similar to Method II. There can be n distinct isomor- 
phisms (in the Galois case) and in this case our algorithm is the same as 
Algorithm II. However, if there is only one isomorphism then we can save 
roughly a factor d. This is because we can do the LLL computation for all 
Pi simultaneously. 

2 Preliminaries 

We let Of 2-]<n denote the polynomials over 0_ with degree less than n. 

Definition 2.1. If h(a) G Q(a) then the notation h(x) is the element of 
Q[^]<™ that corresponds to h(ot) under i^a. 

Under an isomorphism /3 will map to some h{a) G Q(a), 



A polynomial h{x) G Q[x] <ri represents an isomorphism if and only if 
h(a) is a root of g, i.e. g(h(a)) = 0. 

If Q((3) is isomorphic to Q(a) then g and / have the same factorization 
pattern in Q p [x] for every prime p. To simplify the factoring in Q p [x] we 
restrict to good primes p, defined as: 



{l,...,d}. 



h(a±) = Pi. 



n-l 




(1) 



2 



Definition 2.2. A good prime p is one that does not divide the leading 
coefficient of / or g and does not divide the discriminant of either / or g. 

Remark 2.3. Both / and g are taken to be in Z[x]. 

For a good prime p we can factor / in Q p [x] up to any desired p-adic 
precision by factoring in ¥ p [x], followed by Hensel Lifting [11, p. 137]. 
Likewise we can distinct-degree factor / as: 

f = F 1 F 2 ...F m mQ p [x] (2) 

where Fj, is the product of all irreducible factors of / in Q p [x] of degree d 
[11, Section 3.4.3]. 

Definition 2.4. Sub-traces Let p be a prime and d a positive integer. 
Then we define the Q-linear map: 

Tr}(f, *) : Q(o) -> Q p 

as follows. Let h(x) <G Q[x]< n , h(a) G Q(a) and as above, then: 

Tr d p (f,h(a)):= £ fe( 7 ) 

F d (l)=0 

We call these maps sub-traces because the sum is taken over a subset of the 
roots of /. 

Likewise we define Tr^(g, *) : Q(/3) -> Q p . 

Remark 2.5. The map Trt 1 does not depend on the choice of the minimal 
polynomial / that is used to represent the number field. In particular if 
(3 h-> h(a) is an isomorphism Q(/3) — > Q(a) then 

Tr^( 5 , /3) = Tr^(/, fc(a)) for every p, d 

Definition 2.6. We will now define two bases of Q(a) that we will need. 
The first one is the standard basis, which is {1, a, a 2 , ... , a™ -1 }. The second 
will be called the rational representation basis, which is 
{l/f'(a),a/f'(a),...,a n - 1 /f'(a)}. 

Rational representation can improve running time and complexity re- 
sults, see [4]. This representation has also been used under various names, 
see [2, 4], and occurs naturally in algebraic number theory as a dual basis 
under the trace operator, see [2]. 



3 



A basis for Q(a) corresponds to a map p : Q n — > Q(a). We use the 
rational representation basis, therefore 

^ n— 1 

P ■ (ao,ai, • • • ,dn-l) ^ 777 ^ / \ a i al - 

t la) 

Definition 2.7. The inverse linear map h(a) i— >• /i, from Q(a) to Q™ is as 
follows. Let /i(a) = Yl7=o a « ai e Q( a ) an d write f'(a) ■ h(a) as ^^Zq 1 bid 1 . 
Then define K := (b ,h, . . . ,&„-i) G Q n - 

Remark 2.8. One of the advantages of rational representation is: by using 
the hi in h instead of the aj, we have h G Z n for every algebraic integer 
h(a), see lemma [4721 Moreover, as in [4] this also improves bounds (section 
4). It is also better to use g n h than simply using h(a) since g n h will have 
integer components, by Corollary 14, 3[ which are easier to bound and are 
heuristically of smaller size [4, Section 6]. 

For a polynomial f(x) = Y17=o f iX% denote 

/ n \ 1/2 

Let M{f) be the Mahler measure of /, 

M(f) :=/„■ [J max{l,| 7 |}. 

/(7)=0 

3 Overview of the Algorithm 

Goal: To find all g n h G Z n for which j3 i— > /i(a) defines an isomorphism 

Q(/3)^Q(q). 

Idea: The aim of the pre-processing algorithm in Section 5 is to find a 
sequence 

such that all g n h are in each Lj. We can then use to speed up the 
computation of the isomorphism(s), especially when dim(Lfc) is small. The 
cost of computing is comparable to one iteration in Method II. 

In the algorithm we start with the lattice Z n and then add the re- 
strictions imposed by the condition that under an isomorphism, sub-traces 
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Q(a) — > Q p must correspond to sub-traces Q(/3) — > Q p . By doing this for 
several primes we are able to narrow down the possible isomorphisms. If 
dim(Lfc) < 1, this directly gives the isomorphism or shows that there is no 
isomorphism. If dim(L^) > 1 then we switch to Method II, but starting 
with Lfc. Thus we end up with d lattice reductions of dimension dim(Lfc). 
In the worst case dim(Lfc) n, this costs the same as Method II. In the 
best case, dim(Lfc) < 1 and we save a factor d. 

4 Bounding the length of g n h 

To effectively carry out this algorithm we will need a good upper bound on 
the size of g n h. In this section we aim to find such a bound. 

Definition 4.1. Let ai, . . . , a n G C be the roots of /. Then using the basis 
{1, x, x 2 , . . . , x n_1 } of C[x]< n and the standard basis {e±, e2, . . . , e n } for C n , 
the interpolation map C n — > C[x]< n is given by: 



e, : (->• 



f{x)/(x - ag 



This polynomial takes value 1 at x = ai and value at x = ctj (i ^ j). 
The inverse of the interpolation map is the evaluation map, which is given 
by the Vandermonde matrix: 



1 ati 

1 «2 

1 a 3 

1 a n 



a 1 



a. 



„7i— r 
l 

n-l 



a. 



n-l 



a 



n-l 



Lemma 4.2. If a £ Q(a) is an algebraic integer and f(x) is the minimal 
polynomial for a, then f'(a) ■ a € Z[a]. 

Proof. Denote by W the complex embeddings of Q(a). Then define 



m 



Z 4 ry, 



1 = 1 



a 



The coefficients of m(x) are in Q since the polynomial is symmetric in the 
a®. But m(x) is also a sum of polynomials all of whose entries are algebraic 
integers. Hence m(x) G Z[x]. Note that for a = we get m(a) = af'(a) G 
Z[a\. " □ 
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Corollary 4.3. Let f3 1-4 h(a) be an isomorphism o/Q(/3) and Q(a). Then 
g n h(a) is an algebraic integer and hence g n h G Z n . 

Proof. Apply lemma [4T2l by letting a = g n h(a) and recall that g n h is com- 
prised of the coefficients of g n f'(a)h(a) in the standard basis, each of which 
will be integers by lemma R~2l □ 

Lemma 4.4. Let P{x) = E^i^S G QM<»» P («) = /'(«)/»(«)• 

Proof. If we evaluate f'(x)h(x) at the roots of /(x) and then interpolate we 
get: 

i=l ^ v v i=l 1 

Therefore Yli=i fii /l^. will be the remainder of f'(x)h{x) divided by /(#), 
because they are of the same degree and coincide on the n roots of f{x). 
The lemma then follows from the fact that a is a root of fix). □ 

In order to bound f'{a)h{x) we will have to bound both and also 

\Pi\. We will use Corollary 14.71 to bound and since we know the up 
to a permutation (they are roots of g{x)), we can bound Yl 

Theorem 4.5. If f(x) and f{x) are polynomials with complex coefficients, 
of degree n and d respectively, such that f{x) divides f{x) and |/(0)| = 
|/(0)| #0, then 

(d \ 1//2 

Proof. See Granville, [1]. □ 

Corollary 4.6. If f(x) and f(x) have the same leading coefficient and 
/(0),/(0) 7^ and f(x) divides f(x) then equation (GJ) holds. 

Proof. Apply Theorem 14.51 to the reciprocals of / and /. □ 

Corollary 4.7. Let P(x) be an irreducible polynomial (over of degree 
n > 1 and let {71,72, • • • ,7n} be its complex roots. Then 

<n\\P(x)\\ 

x-7i 
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Proof. Take f(x) = and f{x) = P(x) and apply Corollary 14.61 Then 



P(x) 













'n-(n-l) f N 2 ' 

n — 1 



1/2 



E 

3=0 



iPfa) 



1 / i\ 2' 

n — 1 



1/2 



n — 1 



+ 



n — 1 
1 



J 

2\ V2 



E 

vJ=0 



|P(s) 



|P( X )|| = (n 2 -2n+2) 1 / 2 ||P(x)|| < n||P(x)||. 



□ 



Theorem 4.8. Let 



then: 



s(/3)=0 

/3GC 



9n\\h\\ < g n n [Sg( x )) \\f{x)\\. 



(4) 



There are several ways to bound S g t x ) : 

1) S g r x \ < The degree of g(x) times the rootbound described in [3]. 

®) Sg(x) — M(g)/lc(g) + (n — 1), where the Mahler measure can be bounded 

by \\g(x)\\- 



Proof, (of Equation (4)) 



h\\ = \\P\\ = || E^^Tll ^ "ll/(*)ll £ |A| = n||/(x)||5, 



i=i 



x — a 



i=l 



The first equality is by the definition of h, the second by Lemma 14.41 and 
the inequality by Corollary 14.71 □ 



5 The Algorithms 

Here we give the algorithms for computing the isomorphisms between num- 
ber fields. The Pre-processing algorithm reduces the lattice of possible iso- 
morphisms and gives the explicit isomorphism if there is only one. The 
next algorithm, Findlsomorphism, calls the Pre-processing algorithm and 
uses the remaining lattice to check which maps on roots corresponds to an 
isomorphism. 

Algorithm: LLL-with-removals[10] 
Input A matrix A and a bound b. 
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Output A set of LLL reduced row vectors where the last vector is removed 
if its Gram-Schmitt length is greater than b. 

Algorithm: FindSuitablePrime 
Input (f(x), g(x), x, bp, b, e), where bp is the first prime to test, b and e 
determine the level to Hensel Lift to. 

Output p,p a ,m,[[F dl ,G dl ],[F d2 ,G d2 ], . . .[F dm ,G dm \], see equation (2) for 

notation. 

Procedure 

1. p := bp, counter:= 0. 

2. Repeat (until the algorithm stops in Steps 2(d)ii, 2(f) or 2(j)). 

(a) p := nextprime(p) 

(b) if p\ discriminant(f, x) or p\f n then go to Step 2(a) 

(c) if p\ discriminant(g,x) or p\g n then go to Step 2(a) 

(d) Distinct Degree Factor f as f = F dl F d2 . . . F dm mod p. 

i. If m = 1 then counter := counter +1. 

ii. If counter > 25 then print "They appear to be Galois" and 
return 0,0,0,0. 

Hi. Return to Step 2(a). 

(e) Distinct Degree Factor g as g = G d i G d i . . . G d i mod p. 

12 m f 

(f) Ifrriy^m' or if the degrees of Fi and Gi do not match then return 
'There is no isomorphism". 

(g) Let a := [6 e / 10 2 e / 4 ] . 

(h) Hensel lift f = F dl F d2 . . . F dm mod p a and likewise for g. 

(i) If deg(Fi) > then store p for later use. 

(j) Returnp,p a ,m,[[F dl ,G dl ],[F d . 2 ,G d2 }, . . .[F dm ,G dm ]] as output and 
stop. 

Algorithm: Pre-Processing 

Input Polynomials f(x) and g(x). 

Output Either "No isomorphism exists", a verified isomorphism, or a Z- 
module which contains (g n h,g n ) for every isomorphism h. 
Remark: This lattice is given as the row space of a matrix C. 
Procedure 
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1. Initialize 



(a) e := n + 1. 

(b) C := (n + 1) x (n + 1) identity matrix. 

(c) p := 3. 
ft) g := 0. 

fej Lei {Base*} G Q(a)<„, i = 1 . . . n be {p(l, 0, . . . , 0), p(0, 1, . . . , 0), . . . , p(0, 0, . 
wrat/i /) defined in Section 2. 

2. Let S be an upper bound for Ylg(P)=o \Pi\> e -9- or \4-&\ %)- Our 

implementation uses fa4.8\l). 



••,1)} 



3. Let b := nS\\f(x)\\, be the bound described in Theorem \4-8\ 
4- Repeat (until the algorithm stops in 4(b), 4( e ) or 4(i))- 

(a) q:=q + l. 

(b) p,p a ,m, M q := FindSuitablePrime(/, g, x,p, b, e). 

i. If p = then return C. 

(c) Find Trp(f, Base^) for i = 1 . . . n and Tr^{g,l5) for each d with 



(d) A: 



deg(Fd)> 0. The necessary Fd,Gd are read from M q . 
C CT 



P 



where 



p 



T := 



Tr£(/, Basei) 
Trj\ (/, Base 2 ) 



Tr^(f, Basei) 
Tr d ™ (/,Base 2 ) 



Trfc(f, Base, 



Tr£(/,Base n ) 
Tr£(g,f3) 

the di, . . . , d m are as in Step 2(h) in Algorithm FindSuitablePrime. 
( Omitted entries are zero.) 

(e) IfCT = mod p a then 

i. counter := counter +1. 
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ii. If counter < 10 then Go to Step 4(a) else return C and stop. 

(f) L := LLL-with-removals(A, b). 

(g) Let C be the matrix with the first n + 1 columns of L and B the 
remaining m columns of L, so L = [ C B ]. 

(h) ifB^O then 

i. B := 10 20 • B 

ii. A:=[C B } 

Hi. L := LLL-with-removals(A,b) , then go to Step 4(d)- 

(i) Let e := number of rows of C. 

i. if e = then output "There is no isomorphism. " 
ii. if e = 1 then let C be [V, v] with V an n dimensional vector, 
and let h be the polynomial corresponding to V/v. 



B. If iso satisfies g then output 'iso is the only isomor- 
phism. " 

C. If not then output "There is no isomorphism. " 
Hi. Else, go to Step 4 a - 



Remark 5.1. If we let d be the number of isomorphisms — > Q(a)) 
then just by looking at the input /output of the Pre-processing algorithm we 
see that: 



In the next algorithm we use the lattice outputted from Pre-Processing 
to check all possible maps on the roots to see which are actual isomorphisms. 
This will find all isomorphisms from Q(/3) — > Q(a). 

The following algorithm is described for (linear) roots of / and g in Q p 
and can be extended to the roots of Fj and G{ instead. 

Remark 5.2. It should be noted that even if the Pre-processing Algorithm 
does not find the isomorphism(s), the LLL switches it performs will still 
contribute to the Findlsomorphism Algorithm. This is true for the same 
reason as in [11, pg 175]. 



A. Let iso: 



h{a)g n 



If d G {0, 1} then the output is either 




If d > 1 then the output is a lattice 
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Algorithm: Findlsomorphism 
Input Two polynomials, f,g G 7L\x\ which are irreducible and of the same 
degree. 

Output The set of all isomorphisms from Q[x]/(f) to (Q[x]/(g). 
Procedure 



1. C := Pre-Processmgf/(x) , g{x), x). 

2. If Step 2(i) in Algorithm FindSuitablePrime (called from Pre-Processingj 
stored at least one prime, then choose one with smallest deg{F\). Oth- 
erwise keep calling Algorithm FindSuitablePrime until such a prime is 
found. 

3. Let cci, . . . ,ctd be the roots of F± and Hensel lift them to Z/ (p a ) with a 
as in Algorithm FindSuitablePrime. Likewise let ■ ■ ■ , fid S Z/(p a ) 
be the roots of G\ . 

4- For j from 1 to d do: 

(a) Apply steps 4(d) through 4(i)H of Pre-Processing using 



Basei | 
Base2| 

Base 



Pi 



(b) Ife>l then 

i. Hensel Lift the roots of f and g to twice the current p-adic 
precision, i.e. p 2a . 

ii. Apply Step 4(a) with the more precise roots. 



5.1 Proofs of Termination and Validity 

In this section we prove that the algorithms terminate and show that the 
algorithm does indeed produce all isomorphisms of the number fields Q(/5) 
and Q(a). 

First we cite a lemma which shows why we can use LLL with removal 
in our algorithm. 
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Lemma 5.3. Let {b±, . . . , b^} be a basis for a lattice, C , and {&*, . . . , &£} 
the corresponding Gram-Schmitt orthogonalized basis for C. If ||fet|| > B 
then a vector in C with norm less than B will be a It-linear combination of 
{h, ■ ■ ■ A-i}- 

Proof. This follows from the proof of Proposition 1.11 in [9], it is also stated 
as Lemma 2 in [10]. □ 

Corollary 5.4. Using LLL-with-removals on a lattice containing g n h with 
the bound b, computed in Step 3 of Pre-Processing, does not remove g n h 
from the lattice. 

Proof. Using Lemma 15.31 and Theorem 14.81 we know that removing final 
vectors with Gram-Schmitt length bigger than b does not remove any of the 
g n h. □ 

Lemma 5.5. The Pre-Processing Algorithm terminates. 

Proof. The steps of the Pre-Processing algorithm are known algorithms that 
terminate, the only one that is not immediate is Step 4(h). Step 4(h) termi- 
nates because each run increases the determinant of the lattice (Step 4(h)i) 
and any final (see Lemma [5.3p vector with Gram-Schmitt length bigger than 
b is removed, thus the number of vectors is monotonically decreasing and 
hence it can only be run a finite number of times. □ 

Lemma 5.6. The Findlsomorphism Algorithm described above terminates. 

Proof. For Steps 1-3 it is clear why each will terminate. We show that Step 
4 terminates by contradiction. 

Suppose Step 4 never terminates (i.e. the lattice always has dimension > 
1) then it contains at least two vectors: (hi,ei) and (/i2,e2). Let H = h\ 
if e% = or H = e\h,2 — z^fai otherwise. Then H(a) = mod p a . We 
get a contradiction when p a is larger than an upper bound for Kes x (H, /). 
An upper bound for H can be obtained from equation 1.7 in [9] and the 
fact that the last vector after LLL-with-removals has Gram-Schmitt length 
< b. □ 



6 Heuristic estimate on the rank of C 

Let C C Z n+1 be the output of the Pre-Processing Algorithm. 

Observation 6.1. In most (but not all) examples, dim(C) is equal to n 
n/d + 1. 
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This means that Pre-Processing is most effective when d = 1. Though 
as pointed out in Remark 15,21 the work done in Pre-Processing reduces the 
amount left to do. 

Let G be the Galois group of f(x) and let Hi be the stabilizer of «j for 
i € {1,2, ... , n}, where the «j are the roots of f(x). 

Let d be the number of j such that Hi = Hj, then d is the number of 
automorphisms of Q(a). If Q(cn) and Q(/3) are isomorphic then d will also 
be the number of isomorphisms from Q(/3) to Q(a). 

Remark 6.2. We view G, which as the Galois group acts on {a±, ol-i, • • • , Q n }, 
as acting on the set {l,2,...,n}in the most natural way. Hence we view G 
as a subgroup of S n , the symmetric group. 

We will construct a partition matrix as follows. For each a £ G, group 
together the cycles of the same length. Different group elements and cycle 
lengths will correspond to different rows. For each element of G and for 
each cycle length in a, construct one row of P as follows: place a 1 in the 
i th entry if ctj is in a cycle of that length. We call the resulting matrix P. 

For example for o\ = (1)(2)(3)(456) and 02 = (12)(3456) we would get 
the following partition matrix : 



01 I = 1 
o\ I = 3 

P = 02 I = 2 

02 I = 4 



1 1 1 0" 

1 1 1 

1 1 
1111 



Since there are d automorphisms the number of distinct columns of P 
will be < n/d, hence rank(P) < n/d and thus Nullspace(P) > n — n/d. 

This translates into an estimate on the rank of the lattice C since it 
helps us bound 

V = f)Ker(Tr d p (f,*)). 

Nullspace(P) corresponds to elements for which all sub-traces are zero, 
so dim(Nullspace(P)) < dim(V). 

Since we used LLL-with-removals with cut off point b, if V admits a 
basis whose norms are all smaller than b then V C 7ri„. n (C), where 7Ti... n is 
the projection on the first n coordinates. 

Therefore under that assumption 

dim(7Ti... n (C)) > dim(Nullspace(P)) > n — n/d. 
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This leads to our estimate: 



dim(C) « n - n/d + 1. (5) 

For most polynomials taken from the database [5] our estimate is an 
equality. Peter Muller provided an infinite sequence of counter-examples for 
the case we were most interested in {d = 1). For the first group in this 
sequence, the database [5] provides the following example: 
/ := x 14 + 2x 13 - 5x 12 - 184x n - 314x 10 + 474x 9 + 1760x 8 + 1504x 7 - 400x 6 - 
1478x 5 - 818x 4 + 73x 3 + 260x 2 + 121x + 23, 

which has one automorphism but the Pre-processing algorithm outputs a 
dimension 2 lattice. 

7 Computational Efficiency 

We compare our algorithm implemented in Maple with other methods of 
finding isomorphisms. The best algorithm we know for factoring over num- 
ber fields is give by Belabas in [6], which is implemented in Pari/Gp. Both 
implementations were run on a standard 2.2GHz processor. We tested them 
on the field extensions given by the following two degree 25 polynomials: 
h := 2174026154062500000 x 25 -12927273797812500000 x 24 +44254465332187500000 x 23 - 
102418940816662500000 x 22 +180537842164766250000 x 21 -249634002590534050000 x 20 + 
292282923494920350000 x 19 -384197583430502150000 x 18 +815826517614521346000 x 17 - 
2131245874043847615600x 16 +4352260622811059705104x 15 -6463590834754261173232 x 14 + 
6920777688226436002712 x 13 -4525061881234027826296 x 12 +528408698276686662696 x 11 + 
2762117617850418790424 x 10 -4343360968383689825174 x 9 +4191186502263628451150 x 8 - 
2802452375464033976482 x 7 +1332292171242725153638x 6 -161285249796825311495 x 5 - 
429207332210687640181 x 4 +264147194777000152867 x 3 +6032198632961699729 x 2 - 
42885793067858008650 x + 13774402803823804220 and 

f 2 := -42885793067858008650 x-13774402803823804220-161285249796825311495 x 5 + 
429207332210687640181 x 4 +264147194777000152867x 3 -6032198632961699729 x 2 - 
1332292171242725153638 x 6 -2802452375464033976482 x 7 -4191186502263628451150 x 8 - 
4343360968383689825174 x 9 -2762117617850418790424 x 10 +528408698276686662696 x 11 + 
4525061881234027826296 x 12 +6920777688226436002712 x 13 +6463590834754261173232x 14 + 
4352260622811059705104 x 15 +815826517614521346000 x 17 +384197583430502150000 x 18 + 
292282923494920350000 x 19 +249634002590534050000 x 20 +180537842164766250000 x 21 + 
102418940816662500000 x 22 +44254465332187500000 x 23 +2131245874043847615600 x 16 + 
12927273797812500000 x 24 + 2 1 74026154062500000 x 25 . 

These are field extensions with one isomorphism between them. Using 
Belabas' method we have a runtime of 11.69 seconds, which includes the 
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indispensable operation of defining the number field, and with our algorithm 
we have a runtime of 2.97 seconds. 

We also tested this algorithm in the case where our heuristic estimate 
on the rank does not apply, namely on the first counter-example. Using 
Belabas' method we have a runtime of .091 seconds and with our algorithm 
we have a runtime of .797 seconds. 

Bearing in mind that our implementation is not optimized and is coded 
in Maple we expect it to be much faster when using a better implementation 
of LLL. 

We also tested them on a larger example, namely the degree 81 example 
located at [7], our algorithm found the isomorphism in 2326.581 seconds and 
the Belabas' implementation did not finish as it ran out of memory after 
trying for a few days. Therefore there are certainly advantages to using this 
algorithm, as there are examples where there is a significant reduction in 
the required runtime/resources. 

8 Summary 

Method II (from Section 1) can be described by the following procedure: 
first pick p such that / and g have roots in Q p . Fix one root (3 € Q p of 
g, take all roots a%, . . . , 6 Q p of /. Then for each ojj use LLL to find 
hi € Q[x] (if it exists) with hi{ai) = fy. 

Our approach is similar, the difference is that we start with LLL re- 
ductions (obtained from sub-traces) that are valid for all on. This way, a 
portion of the LLL computation to be done for each ol% is now shared. The 
time saved is then (d — 1) times the cost of the shared portion. This can 
be made rigorous by introducing a progress counter for LLL cost similar to 
[10]. 
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